47 matches found
viproy-voipkit
Discontinued Viproy was a PoC VoIP security assessment tool which had several modules and exploits to maintain. However, it was developed as a modules set to Metasploit Framework. As Metasploit Framework had significant updates, Viproy's current modules won't be able to work unless you use legacy...
ligolo
Ligolo : Reverse Tunneling made easy for pentesters, by pentesters Table of Contents Introduction Use case Quick Demo Performance Usage Setup / Compiling How to use? TL;DR Options Features To Do Licensing Credits Introduction Ligolo is a simple and lightweight tool for establishing SOCKS5 or TCP...
EUVD-2026-66376
The BLOCKED access control list items that are evaluated to deny access on the the proxy protocol port can be bypassed completely when connecting over TCP or TLS and sending the query twice on connection that is kept open...
CVE-2026-19538
This vulnerability affects NSD (NLnet Labs' DNS server daemon). BLOCKED access control list items on the proxy protocol port can be completely bypassed by connecting over TCP or TLS and sending the query twice on a single kept-open connection. The CVSS 4.0 score is 8.2 (HIGH) , with primary impac...
EUVD-2026-63079
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an unauthenticated remote client can send a STUN message over TCP or TLS with a body-length field from 65520 through 65532, causing the uint16t len variable in stungetmessagelenstr in src/client/nsturnmsg.c to...
PT-2026-78697
Name of the Vulnerable Software and Affected Versions Coturn versions prior to 4.15.0 Description An unauthenticated remote client can send a STUN message over TCP or TLS with a body-length field between 65520 and 65532. This causes the len variable in the stun get message len str function to wra...
EUVD-2026-59532
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check return value of nvmettcpsetqueuesock The return value of nvmettcpsetqueuesock is currently ignored in nvmettcptlshandshakedone. If it fails e.g., due to the socket not being in TCPESTABLISHED state, the socket...
EUVD-2018-4206
Malware in sbrugna...
EUVD-2011-1185
Malware in sbrugna...
EUVD-2024-2937
Malicious code in bioql PyPI...
CVE-2022-32557
An issue was discovered in Couchbase Server before 7.0.4. The Index Service does not enforce authentication for TCP/TLS servers...
Linux Distros Unpatched Vulnerability : CVE-2024-36907
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: SUNRPC: add a missing rpcstat for TCP TLS Commit 1548036ef120 nfs: make the rpcstat per net...
CVE-2024-47609
A flaw was found in the hyperium/tonic package. In certain conditions, it may be possible for a remote attacker to cause the application to terminate upon accepting a TCP/TLS stream, which may lead to a denial of service...
UBUNTU-CVE-2024-47609
Tonic is a native gRPC client & server implementation with async/await support. When using tonic::transport::Server there is a remote DoS attack that can cause the server to exit cleanly on accepting a TCP/TLS stream. This can be triggered by causing the accept call to error out with errors that...
CVE-2024-47609 Remotely exploitable DoS in Tonic `<=v0.12.2`
Tonic is a native gRPC client & server implementation with async/await support. When using tonic::transport::Server there is a remote DoS attack that can cause the server to exit cleanly on accepting a TCP/TLS stream. This can be triggered by causing the accept call to error out with errors that...
CVE-2024-36907
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-36907
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
